Vulnerability Change Records for CVE-2020-1615

Change History

CPE Deprecation Remap 2/05/2021 11:48:49 AM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:a:juniper:junos:18.2:r1:*:*:*:*:*:*
OR
     *cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*

CVE Modified by Juniper Networks, Inc. 4/09/2020 7:15:12 PM

Action Type Old Value New Value
Changed Description
The factory configuration for vMX installations, as shipped, includes default credentials for the root account. Without proper modification of these default credentials by the administrator, an attacker could exploit these credentials and access the vMX instance without authorization. This issue affects Juniper Networks Junos OS: 17.1 versions prior to 17.1R2-S11, 17.1R3-S2 on vMX; 17.2 versions prior to 17.2R3-S3 on vMX; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7 on vMX; 17.4 versions prior to 17.4R2-S9, 17.4R3 on vMX; 18.1 versions prior to 18.1R3-S9 on vMX; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3 on vMX; 18.2X75 versions prior to 18.2X75-D420, 18.2X75-D60 on vMX; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3-S1 on vMX; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3 on vMX; 19.1 versions prior to 19.1R1-S4, 19.1R2, 19.1R3 on vMX; 19.2 versions prior to 19.2R1-S3, 19.2R2 on vMX; 19.3 versions prior to 19.3R1-S1, 19.3R2 on vMX.
The factory configuration for vMX installations, as shipped, includes default credentials for the root account.  Without proper modification of these default credentials by the administrator, an attacker could exploit these credentials and access the vMX instance without authorization.

This issue affects Juniper Networks Junos OS:
17.1 versions prior to 17.1R2-S11, 17.1R3-S2 on vMX;
17.2 versions prior to 17.2R3-S3 on vMX;
17.3 versions prior to 17.3R2-S5, 17.3R3-S7 on vMX;
17.4 versions prior to 17.4R2-S9, 17.4R3 on vMX;
18.1 versions prior to 18.1R3-S9 on vMX;
18.2 versions prior to 18.2R2-S7, 18.2R3-S3 on vMX;
18.2X75 versions prior to 18.2X75-D420, 18.2X75-D60 on vMX;
18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3-S1 on vMX;
18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3 on vMX;
19.1 versions prior to 19.1R1-S4, 19.1R2, 19.1R3 on vMX;
19.2 versions prior to 19.2R1-S3, 19.2R2 on vMX;
19.3 versions prior to 19.3R1-S1, 19.3R2 on vMX.
Added Reference

								
							
							
						
https://kb.juniper.net/JSA10998 [No Types Assigned]
Removed Reference
https://kb.juniper.net/ [No Types Assigned]

								
						

CPE Deprecation Remap 2/05/2021 11:48:54 AM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:a:juniper:junos:18.2:r1-s3:*:*:*:*:*:*
OR
     *cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*

CPE Deprecation Remap 2/05/2021 11:48:58 AM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:a:juniper:junos:18.2:r1-s4:*:*:*:*:*:*
OR
     *cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*

CPE Deprecation Remap 7/22/2020 2:0:35 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:a:juniper:junos:18.1:r2:*:*:*:*:*:*
OR
     *cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*

CPE Deprecation Remap 7/22/2020 2:0:29 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:a:juniper:junos:18.1:r1:*:*:*:*:*:*
OR
     *cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*

Initial Analysis 4/13/2020 1:47:33 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:juniper:junos:18.1:r1:*:*:*:*:*:*
          *cpe:2.3:a:juniper:junos:18.1:r2:*:*:*:*:*:*
          *cpe:2.3:a:juniper:junos:18.2:r1:*:*:*:*:*:*
          *cpe:2.3:a:juniper:junos:18.2:r1-s3:*:*:*:*:*:*
          *cpe:2.3:a:juniper:junos:18.2:r1-s4:*:*:*:*:*:*
          *cpe:2.3:a:juniper:junos:18.2:r2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.1:r3-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2x75:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2x75:d20:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2x75:d30:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2x75:d40:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.2x75-d10:*:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*
          *cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*
     OR
          cpe:2.3:a:juniper:vmx:-:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
NIST (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added CWE

								
							
							
						
NIST CWE-798
Changed Reference Type
https://kb.juniper.net/JSA10998 No Types Assigned
https://kb.juniper.net/JSA10998 Vendor Advisory

CPE Deprecation Remap 2/05/2021 11:49:04 AM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:a:juniper:junos:18.2:r2:*:*:*:*:*:*
OR
     *cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*